Privacy Policy
Last updated: May 26, 2026
Show Notes is a reader for podcasts. This policy describes exactly what we collect, why, and what we don't do with it. Plain English, no legalese.
What we collect
Your email address. Used to sign you in (we send a magic link instead of asking for a password) and to deliver your daily digest email if you've enabled it. We do not sell or rent your email to anyone.
Your podcast subscription list. The shows you've subscribed to, imported, or saved. We need this to know what to process for you.
Your interactions with episodes. Which episodes you saved to your library, skipped, marked done, or shared. This is used to power the product (e.g. so the daily digest knows what's new) and is not shared with anyone outside Show Notes.
Standard server logs. Your IP address and browser user-agent are written to ephemeral request logs for security and debugging. Logs are retained for no longer than 30 days and are not used to build advertising profiles.
What we don't collect
- No advertising trackers. No third-party ad SDKs.
- No location data. We don't ask for it and the iOS app doesn't request the permission.
- No contacts, photos, microphone, or camera access.
- No cross-app tracking. The iOS app does not link any identifier across other apps or websites, the App Tracking Transparency prompt is not triggered because we have nothing to ask for.
Third-party processors
To deliver the product, we send specific data to specific vendors. Each is bound by a data processing agreement and limited to the scope below.
- AssemblyAI, we send podcast audio URLs (publicly available from the podcast feed) for transcription. We do not send your email, name, or any identifier.
- Anthropic (Claude), we send episode transcripts (derived from public podcast audio) for summarization. We do not send your email, name, or any identifier.
- Resend, we send your email address and the digest content for transactional email delivery (magic link, daily digest).
- Hatchbox and DigitalOcean, host the application server and database.
- Cloudflare, fronts the website (DNS, TLS, CDN).
We do not use any third-party analytics, marketing automation, or advertising platforms.
Cookies
We set one cookie: a session cookie that keeps you signed in. It is HTTP-only, secure, and expires when you sign out. We do not set any other cookies.
Your rights
You can:
- Access your data. Email us and we'll send you everything we have on file.
- Delete your account. Email us and we'll permanently delete your account, podcast subscriptions, library, and any associated data within 30 days. In-app account deletion is coming to the iOS and web apps in a future release.
- Export your data. Email us and we'll send you a portable export of your library, subscriptions, and account metadata.
- Opt out of the daily digest. Unsubscribe link is in every digest email, or change the setting in the app.
If you're in the EU, UK, or California, the rights above apply to you under GDPR / UK GDPR / CCPA. You also have the right to lodge a complaint with your local data protection authority, though we hope you'd tell us first.
Children
Show Notes is not designed for children under 13 (under 16 in the EU). We do not knowingly collect data from children. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
If we change this policy, we'll update the "Last updated" date at the top and, for material changes, email signed-in users. Continued use after a change constitutes acceptance.
Contact
Email [email protected] for any privacy question, request, or concern. Show Notes is operated by Dave Paola as an individual; there is no LLC, no support team, no chatbot. You get a person.